CVE-2018-11596

Name of the Vulnerable Software and Affected Versions Espruino versions prior to 1.99

Description The issue allows attackers to cause a denial of service, resulting in an application crash, by providing a user-crafted input file. This is due to a Buffer Overflow that occurs during syntax parsing. The problem arises from a check for '0' being made for the wrong array element in jsvar.c.

Recommendations For versions prior to 1.99, update to version 1.99 or later to resolve the issue.